BakerHostetler 


Via email to ocpdatabreach@mt.gov 

November 2, 2018 


Montana Attorney General’s Office 
Office of Consumer Protection 
P. O. Box 200151 
555 Fuller Avenue 
Helena, MT 59601-3394 

Re: Hemenway & Barnes LLP and Hemenway Trust Company 

Security Incident Notification 

Dear Sir or Madam: 

We are writing on behalf of our client, Hemenway & Barnes LLP and Hemenway Trust 
Company (“Hemenway”), to notify you of a security incident involving one Montana resident. 
Hemenway does not waive its objection that Montana lacks personal jurisdiction related to this 
matter. 

On September 1, 2018, Hemenway discovered that an unauthorized person gained access to 
some of its employees’ email accounts. When Hemenway learned about the unauthorized access, 
it immediately secured the email accounts, began an investigation and engaged a leading forensic 
film. Hemenway conducted a thorough review of the email accounts and determined on October 
24, 2018 that an email or email attachment in one of the accounts contained personal information 
that included the name and Social Security number of one Montana resident. 

Beginning today, November 2, 2018, Hemenway is mailing a notification letter by U.S. Mail to 
the potentially affected Montana resident, in accordance with Mont. Code Ann. § 30-14-1704, in 
substantially the form as the enclosed letter. Hemenway is available to speak with potentially 
affected individuals and has offered one year of free credit monitoring services to potentially 
affected individuals. 

To help prevent something like this from happening in the future, Hemenway continues to 
enhance its cybersecurity defenses and procedures to detect improper access to its systems. 
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Please do not hesitate to contact me if you have any questions regarding this matter. 
Very truly yours, 



Randal L. Gainer 


Enclosure 



